search

Peripli / service-manager

Service Manager Core
Apache License 2.0
69 stars 28 forks source link

Credentials integrity #453

Closed dpanayotov closed 4 years ago

dpanayotov commented 4 years ago

Motivation

Prevent someone to change part(s) of the integral data of a secured object in the database and thus tricking the application to send sensitive information to a malicious application.

Approach

Each secured object defines which is its integral data and a processor calculates an integrity to be stored next to the object. Upon retrieval of the object, the integrity is calculated and is compared to the previously stored one.

coveralls commented 4 years ago

Coverage Status

Coverage decreased (-0.008%) to 86.985% when pulling f3983db2f77ae07a37856058310980c29a67f4a9 on credentials_integrity into cc278aa7e691daa3d71526c703f904827630187f on master.

dpanayotov commented 4 years ago

@NickyMateev @pankrator please review again